Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138483:

Package: libnetconf2
Version: 3.7.10-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o
| /usr/bin/cc -Dnetconf2_EXPORTS 
-I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat 
-I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src 
-I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g 
-O2 -Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 
-Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 
-DNC_ENABLED_SSH_TLS -fPIC -MD -MT 
CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF 
CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o 
CMakeFiles/netconf2.dir/src/session_openssl.c.o -c 
/build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In 
function ‘nc_tls_get_san_value_type_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   505 |         if (ip->length == 4) {
|       |               ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], 
ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                      ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], 
ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                   ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], 
ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                       
         ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], 
ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                       
                      ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   511 |         } else if (ip->length == 16) {
|       |                      ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                                    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                                                 ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                                                              ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                                                                       
    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], 
ip->data[3], ip->data[4], ip->data[5],
|       |                                                                       
                 ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                                    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                                                 ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                                                              ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                                                                       
    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], 
ip->data[9], ip->data[10], ip->data[11],
|       |                                                                       
                  ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], 
ip->data[15]) == -1) {
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], 
ip->data[15]) == -1) {
|       |                                     ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], 
ip->data[15]) == -1) {
|       |                                                   ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], 
ip->data[15]) == -1) {
|       |                                                                 ^~
| In file included from 
/build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: 
error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct 
asn1_string_st’}
|   521 |             WRN(NULL, "SAN IP address in an unknown format (length is 
%d).", ip->length);
|       |                                                                       
         ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in 
definition of macro ‘WRN’
|    57 | #define WRN(session, ...) 
if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, 
NC_VERB_WARNING, __VA_ARGS__);}
|       |                                                                       
                                                    ^~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In 
function ‘nc_tls_move_crls_to_store’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: 
warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use 
X509_STORE_get1_objects [-Wdeprecated-declarations]
|   789 |     objs = X509_STORE_get0_objects(src);
|       |     ^~~~
| In file included from /usr/include/openssl/x509.h:494,
|                  from /usr/include/openssl/ssl.h:34,
|                  from 
/build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48,
|                  from 
/build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36,
|                  from 
/build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37:
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
|   527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
|       |                        ^~~~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In 
function ‘nc_server_tls_get_crl_distpoint_uris_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: 
warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use 
X509_STORE_get1_objects [-Wdeprecated-declarations]
|  1370 |     objs = X509_STORE_get0_objects(cert_store);
|       |     ^~~~
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
|   527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
|       |                        ^~~~~~~~~~~~~~~~~~~~~~~
| make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: 
CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1
| make[3]: Leaving directory 
'/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu'

Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z

Sebastian

** Affects: libnetconf2 (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: libnetconf2 (Debian)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl-4.0

** Bug watch added: Debian Bug tracker #1138483
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138483

** Changed in: libnetconf2 (Debian)
 Remote watch: None => Debian Bug tracker #1138483

** Tags added: ftbfs openssl-4.0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155035

Title:
  libnetconf2: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libnetconf2/+bug/2155035/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to